Privacy Policy

AudienceRPM (a business operated as a trading name) is based in Montreal, Quebec, Canada, and is responsible for the personal information described in this policy.

Person in charge of the protection of personal information: Lindi Dique, reachable at lindi@audiencerpm.com. Address any question, access request or complaint about your personal information to them.

Because we operate from Quebec, we are subject to Quebec’s Act respecting the protection of personal information in the private sector, as modernised by Law 25, in addition to the federal PIPEDA.

This policy covers this website only. If you become a client, the handling of any data we analyse on your behalf is governed by the separate written agreement for that engagement, not by this page.

We collect two things, and only two.

• What you send us through the contact form: your name, email address, optionally your company or website, and whatever you write in the message field.
• Standard server logs: your IP address, browser user-agent and the time of the request. These are a technical by-product of serving a web page, and we use them to keep the site running and to stop automated abuse of the contact form.

We do not use cookies, analytics or third-party tracking on this site. There is no advertising pixel, no session cookie and no cross-site tracking. Nothing about your visit is recorded beyond the server logs described above.

Contact form details are used for one purpose: to read your enquiry and reply to it. We do not use them for anything else.

Under Canadian privacy law (PIPEDA), submitting the form is treated as your consent to us using those details to respond. If you are in the EU or UK, our lawful basis is taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries. Server logs are kept on the basis of our legitimate interest in the security and availability of the site.

We do not sell personal information, and we do not share it for anyone else’s marketing. Your enquiry is handled by these service providers on our behalf:

• Google (Google Workspace) - hosts the mailbox your enquiry is delivered to and transmits it.
• Cloudflare - routes traffic to the site and provides network protection.

Both are established providers bound by their own data protection commitments. We may also disclose information where we are legally required to do so.

Our service providers operate globally, so your information is stored and processed outside Quebec, including in the United States. Before using a provider that handles personal information outside Quebec, we assess whether the information will receive protection equivalent to that required under Quebec law, taking account of the sensitivity of the information, the purpose it is used for, the protections the provider commits to, and the legal framework where it is stored.

Where personal information originates in the EU or UK, our providers rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses.

Contact form enquiries are kept for up to 24 months from your last contact with us, so we have context if you get back in touch, and are then deleted. Server logs are kept for a short period for security purposes and then rotated out. If you would like your enquiry deleted sooner, email us and we will do it.

Wherever you are, you can email lindi@audiencerpm.com to ask what we hold about you, to have it corrected, or to have it deleted. We will respond within 30 days.

In Quebec,Law 25 gives you the right to access your personal information, to have it corrected, to withdraw your consent at any time, to receive the computerised information you gave us in a structured, commonly used technological format (portability), and to require us to stop disseminating your information or to de-index it where the law allows. If you are not satisfied with our response, you can complain to the Commission d’accès à l’information du Québec (CAI).

Elsewhere in Canada, PIPEDA gives you the right to access and correct your personal information and to withdraw consent, and to complain to the Office of the Privacy Commissioner of Canada.

In the EU or UK, the GDPR additionally gives you the rights to restriction, portability and to object to processing based on legitimate interest, and the right to complain to your national supervisory authority (the ICO in the UK).

We reply to enquiries. We do not add you to a mailing list, and we will not send you promotional email off the back of a contact form submission without asking you first, as required by Canada’s Anti-Spam Legislation (CASL). If we ever do send commercial email, every message will identify us and carry a working unsubscribe link.

The site is served over HTTPS, enquiries are transmitted to our mailbox over an authenticated encrypted connection, and access to that mailbox is protected by two-factor authentication. No system is perfectly secure, so please do not send sensitive personal information, credentials or confidential client data through the contact form.

We keep a register of confidentiality incidents involving personal information, as Law 25 requires. If an incident occurs and there is a risk of serious injury to you, we will notify you and the Commission d’accès à l’information du Québec promptly, and take reasonable steps to reduce the harm and stop it recurring.

This is a business-to-business website and is not directed at children. We do not knowingly collect personal information from anyone under 16.

If we change how we handle personal information, we will update this page and revise the date at the top. Material changes, such as introducing analytics or cookies, will be described here before they take effect.